SUSE Studio Onsite

ソフト名：SUSE Studio Onsite 1.x

回避策：あり

脆弱性：XSS, システムアクセス, スクリプト挿入攻撃, シェルコマンドの挿入, 不正HTMLの挿入, ローカルコード実行

ソース：

http://www.suse.com/products/susestudio/

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00013.html

http://secunia.com/advisories/45754/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2225

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2226

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2644

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2645

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2646

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2647

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2648

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2649

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2650

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2651

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2652

CVE：CVE-2011-2225, CVE-2011-2226, CVE-2011-2644, CVE-2011-2645, CVE-2011-2646, CVE-2011-2647, CVE-2011-2648, CVE-2011-2649, CVE-2011-2650, CVE-2011-2651, CVE-2011-2652

危険性：Medium Risk